Sunday, March 23, 2008

Do you use VLC Media Player? Be Careful

2 days ago TorrentFreak published a post stating that VLC Player might be vulnerable to Remote Hijack which means that if you are one of the users who use VLC player then it is most likely that a 3rd party hacker can take control of your machine while sitting on another machine.

Many users have a liking for VLC Media Player, also known as VideoLAN player, as it can nearly play any possible media file format without the need of extra addons or plugins. It is open-source and that is probably how a hacker must have discovered the security loop hole.

The hole gets exploited from a subtitle file buffer overflow (which means that users who use subtitle files are vulnerable to remote attacks while the ones who avoid subtitle files are safe and secure). The other security hole is platform independant i.e. VLC Player users on both Mac and Windows are vulnerable. To make sure your PC is secure from remote attacks, use the nightly builds or just uninstall it until a security update is provided.

No comments: